Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/4fd4fa78-7e3e-3862-af57-a4934092604d.roa
File:                     4fd4fa78-7e3e-3862-af57-a4934092604d.roa (raw, json)
Hash identifier:          LsW1Uj2srJzOWLH6uKnZWKJq/N7F3Pam27i8LbyrvHU=
Subject key identifier:   4D:1E:64:BB:44:C6:D5:A8:60:0D:97:CB:B3:51:5E:7A:65:CD:55:79
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F432858479C11259B4375E90E4F147C80
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/4fd4fa78-7e3e-3862-af57-a4934092604d.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     55066
IP address blocks:        208.82.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:25:9b:43:75:e9:0e:4f:14:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=ddd239c0-1b9f-4eb0-a896-08d21ba83ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:8d:37:6e:fe:90:c3:79:f7:9e:bd:e0:7d:
                    f0:4d:67:d2:c5:b7:9a:ef:0d:8a:de:1e:85:c6:3c:
                    25:a3:a2:34:30:b4:b8:ff:7d:d8:a3:c7:55:4d:e6:
                    3d:92:4d:fc:be:70:94:fa:0b:0e:71:07:3c:fd:d6:
                    96:d4:40:8b:6e:b1:75:49:fa:5d:1c:05:47:4b:ac:
                    f2:74:08:86:c3:7a:92:83:9b:01:03:cd:10:69:21:
                    ba:66:63:fa:4e:89:89:cf:f3:34:47:7e:4d:10:12:
                    9e:d4:41:2b:1c:cd:2e:44:d5:9d:ff:b4:ff:70:d6:
                    fa:32:9b:f2:60:e4:7e:31:34:31:65:92:28:c6:31:
                    5a:72:3c:fd:b8:28:5f:6a:f3:2d:d0:59:19:cf:12:
                    d6:9f:2b:5b:72:f1:07:0e:c4:cc:4a:6a:16:0b:da:
                    22:09:6d:53:71:6e:aa:b0:d1:7e:41:61:f6:99:8f:
                    fd:31:41:c2:22:b3:f7:c4:a9:9c:aa:44:af:ec:21:
                    54:1b:90:fa:d6:6b:52:69:17:ab:46:41:f5:b8:47:
                    ba:96:2d:30:26:4a:06:1e:8c:a0:c3:c7:d0:96:1f:
                    b7:9e:be:cc:cf:e9:a5:3d:86:bb:7a:6e:f2:94:71:
                    ca:61:cc:66:cc:f9:d8:cc:56:bd:c2:2f:97:90:64:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1E:64:BB:44:C6:D5:A8:60:0D:97:CB:B3:51:5E:7A:65:CD:55:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/4fd4fa78-7e3e-3862-af57-a4934092604d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ed:1b:49:69:25:90:03:c5:ee:9a:2b:0c:05:d7:15:cf:08:
         fb:c9:9d:6f:ec:de:53:c8:1d:7b:91:09:1b:19:7c:e2:1c:32:
         99:ac:f6:4b:45:5d:21:e5:de:d4:23:67:fb:6a:c9:b3:6f:66:
         27:e9:7a:8b:f8:8d:49:be:43:19:56:4e:ee:38:14:6e:b0:fe:
         0f:9f:16:e8:10:62:40:0c:ed:93:b4:f6:6e:a5:b3:76:55:7f:
         07:92:20:80:29:29:c8:39:7a:21:3c:6a:08:72:0c:e4:f4:ed:
         38:f6:3b:c8:25:8f:e3:cf:6f:b5:8b:1a:59:d5:19:0c:8b:32:
         90:d2:1a:d5:a1:8f:e1:85:72:4b:91:c1:07:4b:7a:94:a6:c7:
         cc:a4:00:e7:b0:61:ea:fd:9c:36:19:29:c2:b1:4e:d2:04:34:
         6b:bf:6e:c2:fe:cc:07:8e:32:1f:e4:73:46:7d:3e:5b:f7:62:
         ec:e4:9d:81:ed:d9:82:bf:a7:e9:bf:65:32:f7:2e:03:f3:fc:
         ae:c5:8d:e9:f0:84:1c:20:a1:7f:d9:e9:c3:27:ea:c3:a2:cb:
         cc:25:21:1d:6c:57:b0:06:7c:6a:10:fc:36:d2:da:c0:fb:e4:
         37:e8:55:be:ca:7a:3c:13:5f:0a:11:36:ca:fc:c4:ff:47:f3:
         b9:f4:32:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:51 2024 by rpki-client on console-fra.rpki-client.org